DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Security issue may have made some personal information vulnerable on WSDOT system

Posted on February 3, 2022 by Dissent

OLYMPIA – A vulnerability involving a Washington State Department of Transportation system may have exposed personal information stored in an internal database of about 2,200 people, and the agency is reaching out to help notify them of the incident.

It is not known if anyone obtained the information for illegal use, and the vulnerability within the system is now resolved. The database system is not connected to any other databases outside of WSDOT. Because some personal information was included in the database, WSDOT, in an abundance of caution, has set up a call center to locate and verify those who may have been affected and provide information and services.

Who is affected?

Those affected by this incident are:

  • 2,249 trainees employed by private contractors on federally funded WSDOT projects between 1986 and 2021
  • Participants in the federal On-The-Job Training program

The vulnerable personal information included first and last names and the last four digits of social security numbers. To be clear, the information did not include individuals’ full social security numbers, and no other personal information was involved.

The hours worked by these individuals are tracked by WSDOT’s Construction Contract Information System to verify compliance with the federal training program requirements. The personal information is used to verify the trainees’ certification requirements. These were not WSDOT employees, but rather people who worked for contractors in trainee positions on construction projects. WSDOT does not have contact information for those affected, so the agency is making a public notification.

Anyone who participated in the On-The-Job Training program as a trainee for a WSDOT contractor, can call 1-844-917-4454 or visit the agency’s data incident webpage for further details and information about free credit monitoring for eligible affected individuals.

Mitigation steps

WSDOT learned on Dec. 29, 2021, that an older data system maintained by the agency was able to be manipulated in a way to extract information from the database. WSDOT immediately addressed the security issue by applying a security fix on this system within hours of learning of the vulnerability to prevent similar access and then verifying whose information had been vulnerable.

WSDOT has consulted with state cybersecurity officials and the Attorney General’s Office on this matter and is evaluating policies to further strengthen systems, eliminate unneeded data more quickly and increase training on these matters.

Source: Washington State Transportation Department


Related:

  • Government will 'robustly defend' compensation claims from Afghans put at risk by data breach
  • Authorities released free decryptor for Phobos and 8base ransomware
  • Singapore Facing ‘Serious’ Cyberattack by Espionage Group With Alleged China Ties
  • Missouri Adopts New Data Breach Notice Law
  • Qantas obtains injunction to prevent hacked data’s release
  • Ransomware attack disrupts Korea's largest guarantee insurer
Category: ExposureGovernment SectorU.S.

Post navigation

← UK Snack Company Hit by Ransomware Attack, Which Could Cause Delivery Delays
NY State Comptroller DiNapoli Releases School District Audits →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Government will ‘robustly defend’ compensation claims from Afghans put at risk by data breach
  • Authorities released free decryptor for Phobos and 8base ransomware
  • Singapore Facing ‘Serious’ Cyberattack by Espionage Group With Alleged China Ties
  • Missouri Adopts New Data Breach Notice Law
  • Qantas obtains injunction to prevent hacked data’s release
  • Ransomware attack disrupts Korea’s largest guarantee insurer
  • Theft from Glasgow’s Queen Elizabeth University Hospital sparks probe
  • Global operation targets NoName057(16) pro-Russian cybercrime network in Operation Eastwood
  • More than 100 British government personnel exposed by Ministry of Defence data leak
  • New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • 𝐔𝐠𝐚𝐧𝐝𝐚 𝐨𝐫𝐝𝐞𝐫𝐬 𝐆𝐨𝐨𝐠𝐥𝐞 𝐭𝐨 𝐫𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐚𝐬 𝐚 𝐝𝐚𝐭𝐚‑𝐜𝐨𝐧𝐭𝐫𝐨𝐥𝐥𝐞𝐫 𝐰𝐢𝐭𝐡𝐢𝐧 𝟑𝟎 𝐝𝐚𝐲𝐬 𝐚𝐟𝐭𝐞𝐫 𝐥𝐚𝐧𝐝𝐦𝐚𝐫𝐤 𝐩𝐫𝐢𝐯𝐚𝐜𝐲 𝐫𝐮𝐥𝐢𝐧𝐠.
  • Meta investors, Zuckerberg reach settlement to end $8 billion trial over Facebook privacy violations
  • ICE is gaining access to trove of Medicaid records, adding new peril for immigrants
  • Microsoft can’t protect French data from US government access
  • Texas Enacts Electronic Health Record Data Localization Law
  • Upstate NY county clerk again refuses to enforce Texas abortion judgment
  • Attorney General James Leads Coalition Urging Congress to Protect Americans from Masked ICE Agents

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.
Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report